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MODULAR FORMS AND SOME CASES OF THE INVERSE GALOIS 

PROBLEM 

DAVID ZYWINA 


Abstract. We prove new cases of the inverse Galois problem by considering the residual Galois 
representations arising from a fixed newform. Specific choices of weight 3 newforms will show that 
there are Galois extensions of Q with Galois group PSL 2 (Fp) for all primes p and PSL2(Fp3) for all 
odd primes p = ±2, ±3, ±4, ±6 (mod 13). 


1. Introduction 

The Inverse Galois Problem asks whether every finite group is isomorphic to the Galois group of 
some extension of Q. There has been much work on using modular forms to realize explicit simple 
groups of the form PSL 2 (F£r) as Galois groups of extensions of Q, cf. [Rib75], [RV95], [DVOO], 
[DieOl], [Die08]. For example, [DVOO, §3.2] shows that PSL 2 (F£ 2 ) occurs as a Galois group of an 
extension of Q for all primes ^ in a explicit set of density 1 — 1/2^® (and for primes £ < 5000000). 
Also it is shown in [DVOO] that PSL2(F£4) occurs as a Galois group of an extension of Q when 
£ = 2,3 (mod 5) or .^ = ±3, ±5, ±6, ±7 (mod 17). 

The goal of this paper is to try to realize more groups of the form PSL 2 (F£r) for odd r. We will 
achieve this by working with newforms of odd weight; the papers mentioned above focus on even 
weight modular forms (usual weight 2). We will give background and describe the general situation 
in §1.1. In §1.2 and §1.3, we will use specific newforms of weight 3 to realize many groups of the 
form PSL 2 (F^r) with r equal to 1 and 3, respectively. 

Throughout the paper, we fix an algebraic closure Q of Q and define the group G := Gal(Q/Q). 
For a ring R, we let PSL 2 (i?) and PGL 2 (R) be the quotient of SL 2 (i?) and GL 2 (R), respectively, 
by its subgroup of scalar matrices (in particular, this notation may disagree with the R-points of 
the corresponding group scheme PSL 2 or PGL 2 ). 

1.1. General results. Fix a non-CM newform /(r) = of weight A; > 1 on ri(A), 

where the an are complex numbers and q = with r a variable of the complex upper-half plane. 
Let e: (Z/AZ)^ —)■ be the nebentypus of /. 

Let E be the subfield of C generated by the coefficients ; it is also generated by the coefficients 
flp with primes p \ N. The field E is a number field and all the an are known to he in its ring 
of integers O. The image of e lies in . Let K be the subfield of E generated by the algebraic 
integers Pp := apfe{p) for primes p f A; denote its ring of integer by R. 

Take any non-zero prime ideal A of O and denote by .^ = ^(A) the rational prime lying under A. 
Let Ea and 0\ be the completions of E and O, respectively, at A. From Deligne [Del71], we know 
that there is a continuous representation 

pa: G ^ GU{Oa) 

such that for each prime p f N£, the representation pA is unramified at p and satisfies 
(1.1) tr(/3A(Frobp)) = Op and det(/3A(Frobp)) = e(p)p^“^. 
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The representation p\ is uniquely determined by the conditions (1.1) up to conjugation by an 
element of GL 2 (£^a). By composing pA with the natural projection arising from the reduction map 
0\ —)• Fa := O/A, we obtain a representation 

Pa - G ^ GL2(Fa). 

Composing pA with the natural quotient map GL 2 (Fa) —)• PGL 2 (Fa), we obtain a homomorphism 

^?^PGL2(Fa). 

Define the field ¥\ := R/X, where A := A n i?. There are natural injective homomorphisms 
PSL 2 (Fa) > PGL 2 (Fa) PGL 2 (Fa) and PSL 2 (Fa) PGL 2 (Fa) that we shall view as inclusions. 

The main task of this paper is to describe the group Pa°\G) for all A outside of some explicit 
set. The following theorem of Ribet gives two possibilities for for all but hnitely many A. 

Theorem 1.1 (Ribet). There is a finite set S of non-zero prime ideals of R such that if A is a 
non-zero prime ideal of O with X := Rf\ A ^ S, then the group p^™'’(G) is conjugate in PGL 2 (Fa) 
to either PSL 2 {¥x) or PGL 2 (F;^). 

Proof. As noted in §3 of [DWll], this is an easy consequence of [Rib85]. □ 

We will give a proof of Theorem 1.1 in §4 that allows one to compute such a set S. There are 
several related results in the literature; for example, Billerey and Dieulefait [BD14] give an version 
of Theorem 1.1 when the nebentypus e is trivial. 

We now explain how to distinguish the two possibilities from Theorem 1.1. Let L C C be the 
extension of K generated by the square roots of the values r^ = apje{p) with p | it is a finite 
extension of K (moreover, it is contained in a finite cyclotomic extension of £^). 

Theorem 1.2. Let A he a non-zero prime ideal of O such that Pa°\G) is conjugate to PSL 2 (F;,) 
or PGL 2 (Fa), where A = A n R. After conjugating Pa, we may assume that C PGL 2 (F;,). 

Let i be the rational prime lying under A. 

(i) If k is odd, then p^^fiG) = PSL 2 (Fa) if and only if X splits completely in L. 

(a) Ifk is even and [F;^ ; F^] is even, then p^™-'(G) = PSL 2 (F;,) if and only if X splits completely 
in L. 

(in) If k is even, [F;, : F^] is odd, and i) N, then fiA°\G) = PGL 2 (Fa). 

Remark 1.3. 

(i) From Theorem 1.2, we see that it is more challenging to produce Galois extensions of Q with 
Galois group PSL 2 (F£r) with odd r if we focus solely on newforms with k even. However, 
it is still possible to obtain such groups in the excluded case i\N. 

(ii) Parts (ii) and (hi) of Theorem 1.2 are included for completeness, see [DieOl, Proposition 1.5] 
for an equivalent version in the case k = 2 due to Dieulefait. Surprisingly, there has been 
very little attention in the literature given to the case where k is odd (commenting on 
a preprint of this work, Dieulefait has shared several explicit examples worked out with 
Tsaknias and Vila). In §1.2 and 1.3, we give examples with k = 3 and L = K (so A splits 
in L for any A). 

1.2. An example realizing the gronps PSL 2 (F£). We now give an example that realizes the 
simple groups PSL 2 (F£) as Galois groups of an extension of Q for all primes i > 7. Let / = 
be a non-CM newform of weight 3, level N = 27 and nebentypus e(a) = (^). We can 
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choose / so that^ 

f = q + 3iq^ — 5q‘^ — 3iq^ + 5q'^ — 3iq^ + 9g'^° — Ibiq^^ — + • • • ; 

the other possibility for / is its complex conjugate J2n^nq^- 

The subfield E of C generated by the coefficients an is Q(i). Take any prime p / 3. We will see 
that Op = e{p)~^ap. Therefore, Up or iap belongs to Z when e{p) is 1 or —1, respectively, and hence 
Vp = a^/e{p) is a square in Z. Therefore, L = K = Q. 

In §6.1, we shall verify that Theorem 1.1 holds with S = {2,3,5}. Take any prime i > 7 and 
prime A C Z[i] dividing i. Theorem 1.2 with L = K = Q implies that p^°\G) is isomorphic to 
PSLofF/). The following theorem is now an immediate consequence (it is easy to prove directly for 
the group PSL 2 (F 5 ) = A 5 ). 

Theorem 1.4. For each prime i > 5, there is a Galois extension K/Q such that Gal(A'/Q) is 
isomorphic to the simple group PSL 2 (F^). □ 

Remark 1.5. 

(i) In §5.5 of [Ser87], J-P. Serre describes the image of and proves that it gives rise to a 
PSL 2 (F 7 )-extension of Q, however, he does not consider the image modulo other primes. 
Note that Serre was actually giving an example of his conjecture, so he started with the 
PSL 2 (F 7 )-extension and then found the newform /. 

(ii) Theorem 1.4 was first proved by the author in [Zywl3] by considering the Galois action on 
the second Gadic etale cohomology of a specific surface. One can show that the Galois ex¬ 
tensions of [Zywl3] could also be constructed by first starting with an appropriate newform 
of weight 3 and level 32. 

1.3. Another example. We now give an example with K ^ Q. Additional details will be provided 
in §6.2. Let / = Yhn^nq'^ be a non-CM newform of weight 3, level N = 160 and nebentypus 

e(«) = (w)- 

Take E, K, L, R and O as in §1.1. We will see in §6.2 that E = K{i) and that K is the unique 
cubic held in Q(Ci 3 )- We will also observe that L = K. 

Take any odd prime I congruent to ±2, ±3, ±4 or ±6 modulo 13. Let A be any prime ideal 
of O dividing i and set A = A n i?. The assumption on I modulo 13 implies that A = iR and 
that Fa = F^a. In §6.2, we shall compute a set S as in Theorem 1.1 which does not contain A. 
Theorem 1.2 with L = K implies that p^'^\G) is isomorphic to PSL 2 (Fa) = PSL 2 (F£ 3 ). The 
following is an immediate consequence. 

Theorem 1.6. If i is an odd prime congruent to ±2, ±3, ±4 or ±6 modulo 13, then the simple 
group PSL 2 (F^ 3 ) occurs as the Galois group of an extension of Q. 

Acknowledgements. Thanks to Henri Darmon for pushing the author to hnd the modular in¬ 
terpretation of the Galois representations in [Zywl3]. Thanks also to Ravi Ramakrishna and Luis 
Dieulefait for their comments and corrections. Gomputations were performed with Magma [BCP97]. 

2. The fields K and L 

Take a newform / with notation and assumptions as in §1.1. 


^More explicitly, take / = ^gOo — + § 5 ^ 2 , where g := gnn>i(i “ ~ and 9j := 

rf- [Ser87, p. 228]. 
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2.1. The field K. Let L be the set of automorphisms 7 of the field E for which there is a primitive 
Dirichlet character X 7 that satisfies 

(2.1) 7(ap) = x-t{p)ap 

for all primes p \ N. The set of primes p with Op 7 ^ 0 has density 1 since / is non-CM, so the image 
of X') liGS m and the character X 7 is uniquely determined from 7 . 

Define M to he N or AN if N is odd or even, respectively. The conductor of X 7 divides M, 
cf. [MomSl, Remark 1.6]. Moreover, there is a quadratic Dirichlet character a with conductor 
dividing M and an integer i such that X 7 is the primitive character coming from ae*, cf. [MomSl, 
Lemma 1.5(i)]. 

For each prime p\ N,we have Ep = e{p)~^ap, cf. [Rib77, p. 21], so complex conjugation induces 
an automorphism 7 of Li and X 7 is the primitive character coming from e. In particular, T 7 ^: 1 if 
e is non-trivial. 

Remark 2.1. More generally, we could have instead considered an embedding 7 : i? —)■ C and a 
Dirichlet character X 7 such that (2.1) holds for all sufficiently large primes p. This gives the same 
twists, since jiE) = E and the character X 7 is unramified at primes p \ N, cf. [MomSl, Remark 1.3]. 

The set T is in fact an abelian subgroup of Autfi?), cf. [MomSl, Lemma 1.5(ii)]. Denote by E^ 
the fixed field of .F by T. 

Lemma 2.2. 

(i) We have K = E^ and hence Gal{E/K) = T. 

(ii) There is a prime p\ N such that K = Q(rp). 

Proof. Take any p \ N. For each 7 S F, we have 

7(rp) = 7(a2)/7(e(p)) = x^ipfal/li^ip)) = al/e{p) = rp, 

where we have used that X'yip)'^ = 7 (^(p))/^(p)) cf. [MomSl, proof of Lemma 1.5(ii)]. This shows 
that Vp belong in E^ and hence K C E^ since p \ N was arbitrary. To complete the proof of the 
lemma, it thus suffices to show that E^ = Q(rp) for some prime p \ N. 

For 7 G F, let X 7 • G be the continuous character such that X 7 (Frobp) = X'y{p) for all 

p \ N. Define the group H = n7er X7; h is an open normal subgroup of G with G/H is abelian. 
Let JC be the subfield of Q fixed by if; it is a finite abelian extension of Q. 

Fix a prime i and a prime ideal h\i ot O. In the proof of Theorem 3.1 of [RibSS], Ribet proved 
that E^ = Q{al) for a positive density set of finite place v f Ni of JC, where Oy := tr(/ 3 A(Frob^)). 
There is thus a finite place v f Ni of JC of degree 1 such that E^ = Q(a^). We have = Op, where 
p is the rational prime that v divides, so E^ = Q{ap). Since v has degree 1 and JC/Q is abelian, 
the prime p must split completely in JC and hence X'rip) — 1 foi" all 7 G F; in particular, e(p) = 1. 
Therefore, E^ = Q(rp). □ 

2.2. The field L. Recall that we defined L to be the extension of RT in C obtained by adjoining the 
square root of rp = a^l£{p) for all p \ N. The following allows one to find a finite set of generators 
for the extension L/K and gives a way to check the criterion of Theorem 1.2. 

Lemma 2.3. 

(i) Choose primes pi,. ■ ■ ,Pm t ^ generate the group (Z/MZ)^ and satisfy rp^ 7 ^ 0 for all 
1 <i <m. Then L = K{^Jrfff ,..., ,/r^). 

(ii) Take any non-zero prime ideal X of R that does not divide 2. Let pi, ■ ■ ■ ,Pm primes as 
in (i). Then the following are equivalent: 

(a) A splits completely in L, 

(b) for all p \ N, rp is a square in Kx, 
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(c) for all 1 < i < m, rp^ is a square in K\. 


Proof. Take any prime p \ N. To prove part (i), it suffices to show that ^^rf belongs to the field 
L' := K{,yr ^,..., y/nffff). This is obvious if = 0, so assume that / 0. Since the pi generate 
(Z/MZ)^ by assumption, there are integers > 0 such that p = p^f ■ ■ ■ p^ (mod M). Take any 
7 G r. Using that the conductor of X 7 divides M and (2.1), we have 
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Xiip) 


X-yjp) 


Yliapi^ X'yiYliPT) Yliapi X'rip) Yliapi Ui^pV 


Since = K hy Lemma 2.2(i), the value ap/Oi^p) belongs to K] it is non-zero since ^’p / 0 and 
Tp. / 0. We have e{p) = Hi ^{PiY' since the conductor of e divides M. Therefore, 

.2 / ^ X 2 

) G {K^f. 

^Pi J 




This shows that y/rJJ is contained in L' as desired. This proves (i); part (ii) is an easy consequence 
of (i). □ 


Remark 2.4. Finding primes pi as in Lemma 2.3(i) is straightforward since rp ^ 0 for all p outside 
a set of density 0 (and the primes representing each class a G (Z/MZ)^ have positive density). 
Lemma 2.3(ii) gives a straightforward way to check if A splits completely in L. Let e* be the A-adic 
valuation of rp. and let vr be a uniformizer of then rp. is a square in Kx if and only if e is even 
and the image of in Fa is a square. 


3. Proof of Theorem 1.2 

We may assume that p)(™'’(G) is PSL 2 (Fa) or PGL 2 (Fa). For any n > 1, the group GL 2 (F 2 ™) is 
generated by SL 2 (F 2 <^) and its scalar matrices, so PSL 2 (F 2 ™) = PGL 2 (F 2 ri). The theorem is thus 
trivial when ^ = 2, so we may assume that I is odd. 

Take any a G PGL 2 (Fa) ff PGL 2 (Fa) and choose any matrix A G GL 2 (Fa) whose image in 
PGL 2 (Fa) is a. The value j det(^) does not depend on the choice of A and lies in Fa (since 

we can choose A in GL 2 (Fa)); by abuse of notation, we denote this common value by tr(a)^/ det(a). 

Lemma 3.1. Suppose that p f Ni is a prime for which rp ^ 0 (mod A). Then jo^™'^(Frobp) is 
contained in PSL 2 (Fa) if and only if the image of a^/{£{jp)p^~Y = Pplp^~^ in F)) is a square. 

Proof. Define A := pA(F’^obp) and a := pA(F’^obp); the image of A in PGL 2 (Fa) is a. The value 
^p := tr(a)^/det(a) = tr(7l)^/det(^) agrees with the image of a^l{£{p)p^~Y = nplpt‘~^ in Fa. 
Since rp G i? is non-zero modulo A by assumption, the value ^p lies in F)). Fix a matrix ^0 S 
GL 2 (Fa) whose image in PGL 2 (Fa) is a; we have ^p = tr(^o)^/det(Ao)- Since ^p / 0, we find that 
^p and det(^o) hes in the same coset in F])/(F)))^. 

The determinant gives rise to a homomorphism d: PGL 2 (Fa) —)• F))/(F)))^ whose kernel is 
PSL 2 (Fa). Define the character 

—proj 

G PGL2(Fa) 4 F))/(F)))2. 

We have ^(Frobp) = det(^o) • (I^a)^ ~ ^(F'^obp) = 1, equivalently p^™''(Frobp) G 

PSL 2 (Fa), if and only if ^p G F)( is a square. □ 

Let M be the integer from §2.1. 

Lemma 3.2. For each a € (h/MiZ)^, there is a prime p = a (mod Mi) such that rp ^ 0 (mod A). 
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Proof. Set H = it is PSL 2 (Fa) or PGL 2 (Fa) by assumption. Let H' be the commu¬ 

tator subgroup of H. We claim that for each coset k of H' in H, there exists an a S with 
tr(a)^/det(a) / 0. If H' = PSL 2 (Fa), then the claim is easy; note that for any t € Fa and d G F^, 
there is a matrix in GL 2 (Fa) with trace t and determinant d. When ff¥x 7 ^ 3, the group PSL 2 (Fa) 
is non-abelian and simple, so H' = PSL 2 (Fa). When ^^Fa = 3 and H = PGL 2 (Fa), we have 
H' = PSL 2 (Fa). It thus suffices to prove the claim in the case where Fa = F 3 and H = PSL 2 (F 3 ). 
In this case, H' is the unique subgroup of H of index 3 and the cosets of H/H' are represented by 
(Q J) with 6 G F 3 . The claim is now immediate in this remaining case. 

Let X - G ^ {TjfMilj)^ be the cyclotomic character that satisfies x(Frobp) = p (mod Mi) for 
all p\ Mi. The set is thus the union of cosets of H' in H. By the claim above, there 

exists an a G with tr(a)^/det(a) 7 ^ 0. By the Ghebotarev density theorem, there is 

a prime p \ Mi satisfying p = a (mod Mi) and (Frobp) = a. The lemma follows since rplp^~^ 
modulo A agrees with tr(Q;)^/ det(Q;) 7 ^ 0. □ 

Case 1 : Assume that k is odd or [Fa : F^] is even. 

First suppose that p^°\G) = PSL 2 (Fa). By Lemma 3.2, there are primes pi,... ,Pm \ that 
generate the group (Z/MZ)^ and satisfy ^ 0 (mod A) for all 1 < i < m. By Lemma 3.1 and 
the assumption p^°\G) = PSL 2 (Fa), the image of rpjpi^~^ in Fa is a non-zero square for all 
1 < i < m. For each 1 < i < m, the assumption that k is odd or [Fa : F^] is even implies that Pi~^ 
is a square in Fa and hence the image of rp. in Fa is a non-zero square. Since A f 2, we deduce that 
each Tp. is a square in Kx. By Lemma 2.3(ii), the prime A splits completely in L. 

Now suppose that p^°\G) = PGL 2 (Fa). There exists an element a G PGL 2 (Fa) — PSL 2 (Fa) 
with tr(Q!)^/ det(a) 7 ^ 0. By the Ghebotarev density theorem, there is a prime p \ Ni such that 
pProj(Frobp) = a. We have rp = tr(a)^/det(a) ^ 0 (mod A). Since (Frobp) ^ PSL 2 (Fa), 
Lemma 3.1 implies that the image of rp/p^~^ in Fa is not a square. Since k is odd or [Fa : F^] is 
even, the image of rp in Fa is not a square. Therefore, rp is not a square in Kx. By Lemma 2.3(ii), 
we deduce that A does not split completely in L. 

Case 2: Assume that k is even, [Fa : F^] is odd, and i\ N. 

Since i \ N, there is an integer a G Z such that a = 1 (mod M) and a is not a square modulo i. 
By Lemma 3.2, there is a prime p = a (mod Mi) such that rp ^ 0 (mod A). 

We claim that Op £ R and e(p) = 1. With notation as in §2.1, take any 7 G F. Since the 
conductor of X 7 divides M and p = 1 (mod M), we have 7 (ap) = X'yip)0‘p = Since 7 G F was 
arbitrary, we have Op G iL by Lemma 2.2. Therefore, Op £ R since it is an algebraic integer. We 
have e{p) = 1 since p = 1 (mod N). 

Since Op ^ R and rp ^ 0 (mod A), the image of in Fa is a non-zero square. Since k is even, 
is a square in Fa. Since p is not a square modulo i and [Fa : F^] is odd, the prime p is not a square 
in Fa. So the image of 

«p/(e(p)/"^) =P-al/P^ 

in Fa is not a square. Lemma 3.1 implies that p^™^(Frobp) ^ PSL 2 (Fa). Therefore, p^°\G) = 
PGL 2 (Fa). 


4. An effective version of Theorem 1.1 

Take a newform / with notation and assumptions as in §1.1. Let A be a non-zero prime ideal of 
R and let i be the prime lying under A. Let kx be the subfield of Fa generated by the image of Vp 
modulo A with primes p \ Ni. Take any prime ideal A of O that divides A. 
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In this section, we describe how to compute an explicit finite set S of prime ideals of R as in 
Theorem 1.1. First some simple definitions: 

• Let F be an extension of Fa of degree gcd(2,£). 

• Let cq = Q \i l>k — 1 and (- \ N, and cq = I — 2 otherwise. 

• Let ei = 0 if is odd, and ei = 1 otherwise. 

• Let 62 = 0 if .£ > 2A:, and 62 = 1 otherwise. 

• Define M = OpiArP- 
We will prove the following in §5. 

Theorem 4.1. Suppose that all the following conditions hold: 

(a) For every integer 0 < j < eo and character x- {'^/NTd)^ —>■ F^, there is a prime p \ Nt 
such that x{p)p^ € F zs not a root of the polynomial — UpX + e{p)p^~^ € Fa[x]. 

(b) For every non-trivial charaeter x'- ^ {if}? there is a prime p f Ni such that 

x{p) = “1 o,nd Vp^ 0 (mod A). 

(c) If ffk\ ^ {4,5}, then at least one of the following hold: 

• i > 5k — A and i \ N, 

• i = 0, ±1 (mod 5) and ifk\ 7 ^ I, 

• i = ±.2 (mod 5) and ffk\ / , 

• there is a prime p\ Ni such that the image of a^/{e{p)p^~^) in F;, is not equal to 0, 1 

and A, and is not a root 0 / — 3x + 1. 

(d) If ffk\ ^ {3,5,7}, then at least one of the following hold: 

• £ > 4A: — 3 and i \ N, 

• #k\ ^ I, 

• there is a prime p\ Ni such that the image of a^/{e{p)p^~^) in F;, is not equal to 0, 1, 
2 and A. 

(e) If ifkx € {5,7}, then for every non-trivial character x'- (Z/4®i.^A^Z)^ —>■ {±1} there is a 
prime p\ Ni such that x{p) = 1 ond a^/{e{p)p^~^) = 2 (mod A). 

Then the group jo^''°^(G) is conjugate in PGL 2 (Fa) to PSL 2 (A:a) orFGL 2 {kx). 

Remark 4.2. Note that the above conditions simplify greatly if one also assumes that i \ N and 
i > 5k — A. 

Though we will not prove it. Theorem 4.1 has been stated so that all the conditions (a)-(e) 
hold if and only if is conjugate to PSL 2 (fc;s,) or PGL 2 (A:a). In particular, after considering 

enough primes p, one will obtain the minimal set S of Theorem 1.1 (one could use an effective 
version of Chebotarev density to make this a legitimate algorithm). 

Let us now describe how to compute a set of exceptional primes as in Theorem 1.1. Define 
AL = if is odd and M = 4A^ otherwise. Set M' ■= 4®i OpItyP- choose some primes: 

• Let qi,... ,qn be primes congruent to 1 modulo N. 

• Let pi,...,Pfn { A^ be primes with r^. 7 ^ 0 such that for every non-trivial character 
y: {fLjMUT)^ —>• {± 1 }, we have xiPi) = “1 for some 1 < z < m. 

• Let po t be a prime such that Q(z’pp) = K. 

That such primes pi, ■ ■ ■ ,Pm exist is clear since the set of primes p with 7 ^ 0 has density 1. That 
such a prime q exists follows from Lemma 2.2 (the set of such q actually has positive density). 
Define the ring R' := Z[aq/e(g')]; it is an order in R. 

Define S to be the set of non-zero primes A of R, dividing a rational prime i, that satisfy one of 
the following conditions: 

• i<5k — AoTi<7, 

• i\N, 
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• for all 1 < i < n, we have i = qi ov rq^ = (1 + (mod A), 

• for some 1 < i < m, we have i = Pi or = 0 (mod A), 

• i = q or i divides [R : R']. 

Note that the set S is finite (the only part that is not immediate is that Vq. — (1 + q^~^)'^ 7 ^ 0; this 

follows from Deligne’s bound |rgj = |aq.| < 2 ( 7 ^^ and k > 1). The following is our effective 
version of Theorem 1.1. 

Theorem 4.3. Take any non-zero prime ideal X ^ S of R and let A be any prime of O dividing A. 
Then the group p^°fiG) is conjugate in PGL 2 (Fa) to eif/ier PSL 2 (Fa) or PGL 2 (Fa). 

Proof. Let i be the rational prime lying under A. We shall verify the conditions of Theorem 4.1. 

We first show that condition (a) of Theorem 4.1 holds. Take any integer 0 < j < cq and character 
y: (Z/A^Z)^ —F^ = We have i> 5k — A>k — I and i \ N since A ^ S', so cq = 0 and 

hence j = 0. Take any 1 < i < n. Since q^ = 1 (mod N) and j = 0, we have xiQi)<Ii = 1 and 

£{qi) = 1. Since A ^ S', we also have q^ \ Ni {qi f is immediate from the congruence imposed on 
qi). If x{di)di = 1 was a root of — aq^x + £{qi)qi~^ in Fa[x], then we would have a^. = 1 + q^~^ 
(mod A); squaring and using that e{qi) = 1, we deduce that r^. = (1 + q^~^)‘^ (mod A). Since 
A ^ S', we have r^. ^ (1 + q^~^)‘^ (mod A) for some 1 < i < n and hence x{Qi)Qi is not a root of 
x^ - Oq^x + £{qi)qf~^. 

We now show that condition (b) of Theorem 4.1 holds. We have 62 = 0 since X ^ S, and 
hence = A4. Take any non-trivial character y: {'LfMT,)'^ —)• {±1}. By our choice of primes 
pi,... ,Pmi we have x{Pi) = — 1 for some 1 < i < m. The prime pi does not divide Nl (that Pifi^i 
follows since A ^ S). Since A ^ S, we have rp. ^ 0 (mod A). 

Since A ^ S, the prime i \ N is greater that 7, 4A: — 3 and 5k — 4. Gonditions (c), (d) and (e) of 
Theorem 4.1 all hold. 

Theorem 4.1 now implies that p^°\G) is conjugate in PGL 2 (Fa) to either PSL 2 (/i;a) or PGL 2 (A;a). 
It remains to prove that k\ = Fa. We have q i since A ^ S. The image of the reduction map 

R' —>• Fa thus lies in kx. We have i ) [R : R'] since A ^ S, so the map R' —)• Fa is surjective. 

Therefore, A:a = Fa. □ 


5. Proof of Theorem 4.1 

5.1. Some group theory. Fix a prime i and an integer r > 1. 

A Borel subgroup of GL 2 (F£r) is a subgroup conjugate to the subgroup of upper triangular 
matrices. 

A split Cartan subgroup of GL 2 (F^r-) is a subgroup conjugate to the subgroup of diagonal matrices. 
A non-split Cartan subgroup of GL 2 (F^r-) is a subgroup that is cyclic of order — 1. Fix a Gartan 
subgroup C of GL 2 (F£r). Let M be the normalizer of C in GL 2 (F£r). One can show that [Af : C] = 2 
and that tr(( 7 ) = 0 and g^ is scalar for all 77 S AA — C. 

Lemma 5.1. Fix a prime I and an integer r > 1. Let G be a subgroup o/GL 2 (F^t') and let G be 
its image in PGL 2 (F£r). Then at least one of the following hold: 

(1) G is contained in a Borel subgroup o/GL 2 (F^r-), 

(2) G is contained in the normalizer of a Cartan subgroup o/GL 2 (F^r), 

(3) G is isomorphic to 2 I 4 , 

(4) G is isomorphic to S 4 , 

(5) G is isomorphic to 2 I 5 , 

(6) G is conjugate to PSL 2 (F£s) or PGL 2 (F£s) for some integer s dividing r. 


Proof. This can be deduced directly from a theorem of Dickson, cf. [Hup67, Satz 8.27], which will 
give the finite subgroups of PSL 2 (F^) = PGL 2 (F£). The finite subgroups of PGL 2 (F£r-) have been 
worked out in [TXanderj. □ 

Lemma 5.2. Fix a prime I and an integer r > 1. Take a matrix A £ GL 2 (F£r) and let m he its 
order in PGL 2 (F£r). 

(i) Suppose that £ \ m. If m is 1, 2, 3 or 4, then tr{AY/ det(A) is 4, 0, 1 or 2, respectively. If 
m = 5, then ii{A)‘^/ det(A) is a root o/x^ — 3x + 1. 

(ii) If i\m, then iT{A)‘^/ det(^) = 4. 

Proof. The quantity tr(^)^/det(^) does not change if we replace A hy a scalar multiple or by a 
conjugate in GL 2 (F£). If £ \ m, then we may thus assume that A = (^5) C G Ff has order 

m. We have tr(^)^/ det(74) = C + + 2, which is 4, 0, 1 or 2 when m is 1, 2, 3 or 4, respectively. 

If m = 5, then Q + + 2 is a root of — 3x + 1. If ^|m, then after conjugating and scaling, we 

may assume that ^ = ( q }) and hence tr(^)^/ det(^) =4. □ 

5.2. Image of inertia at £. Fix an inertia subgroup of G = Gal(Q/Q) for the prime £\ it 

is uniquely defined up to conjugacy. The following gives important information concerning the 
representation Pt^\xi for large £. Let G ^ F^ be the character such that for each prime p \ £, 
Xi is unramified at p and X£(Frobp) = p (mod £). 

Lemma 5.3. Fix a prime £ > k — 1 for which £ f 2N. Let K he a prime ideal of O dividing £ and 
set A = A n i?. 

(i) Suppose that ri^O (mod A). After conjugating hy a matrix in GL 2 (Fa), we have 


Pkht = 


, k —1 

= (Ae 

0 


hi 


F^ such that after conjugating the F-representation G 

o - 
Pa — 


GL2(Fa) C GL2(F), we 


In particular, contains a cyclic group of order {£ — 1)/ gcd(£ — 1, A: — 1). 

(ii) Suppose that r^ = 0 (mod A). Then PA_\ie absolutely irreducible and p\{Tf) is cyclic. 
Furthermore, the group p')(°\li) is cyclic of order {£+!)/ gcd(£ + 1, A; — 1). 

Proof. Parts (i) and (ii) follow from Theorems 2.5 and Theorem 2.6, respectively, of [Edi92]; they are 
theorems of Deligne and Fontaine, respectively. We have used that = a‘jfe{£) G R is congruent 
to 0 modulo A if and only if £ O is congruent to 0 modulo A. □ 

5.3. Borel case. Suppose that Pt^{G) is a reducible subgroup of GL 2 (F). There are thus characters 

'01,-02: G ' TI7-^ PK 

have 

* 

0 - 02 ^ 

The characters fji and ^/^2 are unramified at each prime p \ N£ since is unramified at such primes. 

Lemma 5.4. For each i £ {1, 2}, there is a unique integer 0 < < £ — 1 such that '■ G —)• 

F^ is unramified at all primes p \ N. If £ > k — 1 and £ \ N, then mi or m 2 is 0. 

Proof. The existence and uniqueness of m* is an easy consequence of class field theory for Q^. A 
choice of embedding Q C induces an injective homomorphism Gq^ := Gal(Q£/Q^) ^ G. Let 
Ql"'’ be the maximal abelian extension of Qi in Qg. Restricting 0j to Gq^ , we obtain a representation 
ipi'. Gq) := Gal(Q|’’/Q£) —F^. By local class field, the inertia subgroup I of Gq) is isomorphic 
to Z^. Since £ does not divide the cardinality of F^, we find that '0j|x factors through a group 
isomorphic to F^. The character '0j|x must agree with a power of Xl\x since Xi'- F^ satisfies 

Xih^) = F^ and F^ is cyclic. 
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The second part of the lemma follows immediately from Lemma 5.3. □ 

Take any i G {1, 2}. By Lemma 5.4, there is a unique Q <mi < ^ — 1 such that the character 

■= : G ^ Fx 

is unramified at i and at all primes p \ N. There is a character Xi'- —)• with Ni > 1 

dividing some power of N and (. \ Ni such that V'i(Frobp) = Xi{p) for all p \ Ni. We may assume 
that Xi is taken so that Ni is minimal. 

Lemma 5.5. The integer Ni divides N. 

Proof. We first recall the notion of an Artin conductor. Consider a representation p: G ^ AutF(fo), 
where B is a finite dimensional F-vector space. Take any prime p ^ i. A choice of embedding 
Q ^ Qp induces an injective homomorphism Gal(Qp/Qp) G. Choose any finite Galois extension 
L/Qp for which p{Gal{Qp/L)) = {/}. For each f > 0, let Hi be the f-th ramification subgroup of 
Gal(L/Qp) with respect to the lower numbering. Define the integer 

fpip) = : Hi]-^ ■ dimp V/V^\ 

i >0 

The Artin conductor of p is the integer N{p) := ■ 

Using that the character ipi: G ^ is unramified at i, one can verify that N[ipi) = Ni. 
Consider our representation pj<^: G ^ GL 2 (F). For a fixed prime p i, take L and Hi as above. 
The semisimplification of is Ui © V 2 , where Vi is the one dimensional representation given by 
fji. We have fp{ifi) + fpi'f’ 2 ) < /p(Pa) since dimp < dimp + dimp V,^\ By using this for 
all p i, we deduce that N{ipi)N{ip 2 ) = N1N2 divides N{pff). The lemma follows since A^(Pa) 
divides N, cf. [Liv89, Prop. 0.1]. □ 

Fix an f G {1,2}; if i > k — 1 and i \ N, then we may suppose that ruj = 0 by Lemma 5.4. Since 
the conductor of Xi divides N by Lemma 5.5, assumption (a) implies that there is a prime p f Ni 
for which Xi{p)p^^ G F is not a root of — OpX + e{p)p^~^ G F[x]. However, this is a contradiction 
since 

Xiip)p^' = ^i(Frobp)x£(Frobp)"*' = '0i(Frobp) 
is a root of — OpX + e{p)p^~^ . 

Therefore, the F-representation is irreducible. In particular, P\(G) is not contained in a Borel 
subgroup of GL 2 (Fa). 

5.4. Cartan case. 

Lemma 5.6. The group P\{G) is not contained in a Cartan subgroup o/GL 2 (Fa). 

Proof. Suppose that Pi^{G) is contained in a Cartan subgroup C of GL 2 (Fa). If = 2, then C is 
reducible as a subgroup of GL 2 (F) since F/Fa is a quadratic extension. However, we saw in §5.3 
that Pa(G) C C is an irreducible subgroup of GL 2 (F). Therefore, i is odd. If C is split, then p\{G) 
is a reducible subgroup of GL 2 (Fa). This was ruled out in §5.3, so C must be a non-split Cartan 
subgroup with i odd. 

Recall that the representation p^ is odd, i.e., if c G G is an element corresponding to complex 
conjugation under some embedding Q C, then det(p^(c)) = —1. Therefore, Pa(c) has order 2 
and determinant —1 7 ^ 1 (this last inequality uses that i is odd). A non-split Cartan subgroup C 
of GL 2 (Fa) is cyclic and hence —I is the unique element of C of order 2 . Since det(—I) = 1, we 
find that Pa(c) does not belong to C; this gives the desired contradiction. □ 
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5.5. Normalizer of a Cartan case. Suppose that P\{G) is contained in the normalize! AA of a 
Cartan subgroup C of GL 2 (Fa). The group C has index 2 in M, so we obtain a character 

Pa:G M/C ^ {± 1 }. 

The character /3 a is non-trivial since Pa{G) 2 C by Lemma 5.6. 

Lemma 5.7. The character /3a is unramified at all primes p \ Ni. If i > 2k and i \ N, then the 
character /3a is also unramified at i. 

Proof. The character /3 a is unramified at each prime p f Ni since Pa is unramified at such primes. 
Now suppose that i > 2k and i \ N. We have i > 2, so i j |AA| and hence Lemma 5.3 implies that 
Pa{/Ii) is cyclic. Moreover, Lemma 5.3 implies that p^'^\li) is cyclic of order — 1)/(A: — 1). 

Our assumption i > 2k ensures that d > 2. 

Now take a generator g of pA{Ti)- Suppose that /3 a is ramified at i and hence g belongs io M — C. 
The condition g G M — C implies that g"^ is a scalar matrix and hence is a group of order 

1 or 2. This contradicts d > 2, so /3 a is unramified at i. □ 

Let X be the primitive Dirichlet character that satisfies /3A(Frobp) = x{p) for all primes p\ Ni. 
Since ^a is a quadratic character, Lemma 5.7 implies that the conductor of x divides Mi. The 
character x is non-trivial since /3 a is non-trivial. Assumption (b) implies that there is a prime 
p \ Ni satisfying x{p) = and rp ^ 0 (mod A). We thus have g G M — C and tr( 5 r) / 0 , where 
g := pA(Trobp) G M. However, this contradicts that tr(A) = 0 for all A G AA — C. 

Therefore, the image of pa does not lie in the normalizer of a Cartan subgroup of GL 2 (Fa). 

5.6. Sts case. Assume that is isomorphic to Sts with fikx ^ {4,5}. 

The image of rp/p^~^ = a^/{e{p)p^~^) in Fa is equal to tr(A)^/det(A) with A = pjx(Frohp). 
Every element of Sts has order 1, 2, 3 or 5, so Lemma 5.2 implies that the image of rp/p^~^ in Fa is 
0, 1, 4 or is a root of — 3a: -|- 1 for all p { Ni. If A|5, then Lemma 5.2 implies that kx = Fs which 
is excluded by our assumption on kx. So A { 5 and Lemma 5.2 ensures that kx is the splitting field 
of — 3x -|- 1 over F^. So kx is F^ if ^ = ±1 (mod 5) and F ^2 if ^ = ±2 (mod 5). 

From assumption (c), we find that i > 5k — 4 and i \ N. By Lemma 5.3, the group p//°\G) 
contains an element of order at least {i — \)/{k — 1) > {{5k — 4) — l)/(/c — 1) = 5. This is a 
contradiction since Sts has no elements with order greater than 5. 

5.7. St 4 and ©4 cases. Suppose that p^™\G) is isomorphic to St 4 or S 4 with fikx / 3. 

First suppose that ifkx ^ {5,7}. The image of rp/p^~^ = ap/{e{p)p^~^) in Fa is equal to 
tr(A)^/det(A) with A = pA(Frobp). Since every element of S 4 has order at most 4, Lemma 5.2 
implies that rp/p^~^ is congruent to 0, 1, 2 or 4 modulo A for all primes p { Ni. In particular, 
kx = Ff. By assumption (d), we must have i > 4k — 3 and i / N. By Lemma 5.3, the group 
Pa{G) contains an element of order at least {i — l)/{k — 1) > {{4k — 3) — 1)/(A: — 1) = 4. This is a 
contradiction since S 4 has no elements with order greater than 4. 

Now suppose that fikx G {5, 7}. By assumption (e), with any x, there is a prime p { Ni such that 
ap/{s{p)p^~^) = 2 (mod A). The element g := p^™'’(Frobp) has order 1, 2, 3 or 4. By Lemma 5.2, 
we deduce that g has order 4. Since 2 I 4 has no elements of order 4, we deduce that H := 
is isomorphic to © 4 . Let H' be the unique index 2 subgroup of 77; it is isomorphic to 2 I 4 . Define 
the character 

/3: G H -G 77/77' ^ {±1}. 

The quadratic character /3 corresponds to a Dirichlet character x whose conductor divides 4^iN. 
By assumption (e), there is a prime p \ Ni such that x{p) = 1 s-iid o/^/{e{p)p^~^) = 2 (mod A). 
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Since /3(Probp) = x{p) = we have (Probp) G H'. Since H' = 2 t 4 , Lemma 5.2 implies that the 
image of a^/{£{p)p^~^) in Fa is 0, 1 or 4. This contradicts ap/{e{p)p^~^) = 2 (mod A). 

Therefore, the image of is not isomorphic to either of the groups 2 I 4 or 64 . 

5.8. End of proof. In §5.3, we saw that P\{G) is not contained in a Borel subgroup of GL 2 (Fa). 
In §5.5, we saw that p\{G) is not contained in the normalizer of a Cartan subgroup of GL 2 (Fa). 

In §5.6, we showed that if #kx ^ {4,5}, then is not isomorphic to Sts. We want to 

exclude the cases i^k\ G {4,5} since PSL 2 (F 4 ) and PSL 2 (F 5 ) are both isomorphic to 2 I 5 . 

In §5.7, we showed that if ^k\ / 3, then p^°\G) is not isomorphic to 2 I 4 and not isomorphic 
to S 4 . We want to exclude the case #kx = 3 since PSL 2 (F 3 ) and PGL 2 (F 3 ) are isomorphic to 2 I 4 
and 64 , respectively. 

By Lemma 5.1, the group p^°\G) must be conjugate in PGL 2 (Fa) to PSL 2 (F') or PGL 2 (F'), 
where F' is a subfield of Fa- One can then show that F' is the subfield of Fa generated by the set 
{tr(A)^/det(A) : A G Pa{G)}. By the Ghebotarev density theorem, the field F' is the subfield of 
Fa generated by the images of ap/{e{p)p^~^) = rp/p^~^ with N£. Therefore, F' = kx and hence 

p^°\G) is conjugate in PGL 2 (Fa) to PSL 2 (A;a) or PGL 2 (A:a). 


6 . Examples 

6.1. Example from §1.2. Let / be the newform from §1.2. We have E = Q(z). We know that 
r 7 ^ 1 since e is non-trivial. Therefore, P = Gal(Q(z)/Q) and K = equals Q. So P is generated 
by complex conjugation and we have Ep = £{p)~^ap for p \ N . As noted in § 1 . 2 , this implies that 
Vp is a square in Z for all p { and hence L equals K = Q. Pix a prime i = X and a prime ideal 
A|f ofO = Z[i]. 

Set qi = 109 and q 2 = 379; they are primes that are congruent to 1 modulo 27. Set pi = 5, we 
have x{Pi) = “ 1 ; where x is the unique non-trivial character (Z/3Z)^ —>• {±1}. Set q = 5; the 
field Q{rq) equals K = Q and hence Z[rg] = Z. 

One can verify that oiog = 164, 0379 = 704 and 05 = —3f, so riog = 164^, r 379 = 704^ and 
rs = 3^. We have 

(6.1) rio 9 -(1 +109^)2 =- 22.33 •7-19-31-317 and r 379 - (1+ 3792)2 =-22.3^ • 2647-72173. 

So if f > 11, then there is an i G {1,2} such that i 7 ^ qi and ^ (1 + qf)^ (mod i). 

Let S be the set from §4 with the above choice of qi, 52 , Pi and q. We find that S = { 2 ,3, 5, 7,11}. 
Theorem 4.3 implies that pJ{™-^(G) is conjugate in PGL 2 (Fa) to PSL 2 (F£) when £ > 11. 

Now take £ G {7,11}. Choose a prime ideal A of O dividing £. We have eg = ei = 62 = 0 and 
A4 = 3. The subfield ki generated over F^ by the images of rp modulo £ with p \ N£ is of course F^ 
(since the rp are rational integers). We now verify the conditions of Theorem 4.1. 

We first check condition (a). Suppose there is a character x'- —>■ F^ such that +(( 72 ) is 

a root of x2 — aq^x + £{q 2 )Q 2 modulo £. Since 92 = 1 (mod 27) and aq^ = 704, we find that 1 is a 
root of x 2 — ttq^x + (72 G F£[x]. Therefore, Ogj = 1 + qi (mod £) and hence = (1 + qi)'^ 

(mod £). Since £ G {7,11}, this contradicts (6.1). This proves that condition (a) holds. 

We now check condition (b). Let +: (Z/3Z)^ —>■ {±1} be the non-trivial character. We have 
y;(5) = —1 and rs = 9 ^ 0 (mod £). Therefore, (b) holds. 

We now check condition (c). If £ = 7, we have £ = 2 (mod 5) and ^ki = £ ^ £^, so condition (c) 
holds. Take £ =11. We have a|/(e(5)52) = 9/52 = 3 (mod 11), which verifies (c). 

Condition (d) holds since ij^ki = 5 if f = 7, and > 4A: — 3 = 9 and £ \ N ii £ = 11. 
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Finally we explain why condition (e) holds when 1 = 1. Let x- (^/7 • 27Z)^ —)• {±1} be any 
non-trivial character. A quick computation shows that there is a prime p G {13,37,41} such that 
x{p) = 1 and that a^/{e{p)p^) = 2 (mod 7). 

Theorem 4.1 implies that is conjugate in PGL 2 (Fa) to PSL 2 (F£) or PGL 2 (F£). Since 

L = K, the group p^°\G) isomorphic to PSL 2 (F£) by Theorem 1.2(i). 

6.2. Example from §1.3. Let / be a newform as in §1.3; we have k = 3 and N = 160. The Magma 
code below verifies that / is uniquely determined up to replacing by a quadratic twist and then a 
Galois conjugate. So the group up to isomorphism, does not depend on the choice of /. 

eps; = [c; c in Elements(DirichletGroupC160)) I Drder(c) eq 2 and Conductor(c) eq 20] [1] 
M:=ModularSymbols(eps,3); 

F:=NewformDecompositionCNewSubspace(CuspidalSubspace(M))); 
assert #F eq 2; 

_,chi:=IsTwist(F[l],F[2],5); 
assert Order(chi) eq 2; 

Define & = C13 + C13 + C13 + Cil; where C13 is a primitive 13-th root of unity in Q (note that 
{1, 5, 8 ,12} is the unique index 3 subgroup of F^'g). The characteristic polynomial of b is + x'^ — 
4x + 1 and hence Q{b) is the unique cubic extension of Q in Q(Ci 3 )- The code below shows that 
the coefficient field E is equal to Q(6, i) (it is a degree 6 extension of Q that contains roots of 
x^ + x‘^ — Ax + 1 and -|- 1 ). 

f:=qEigenform(F[1] ,2001) ; 
a:=[Coefficient(f,n): n in [1..2000]]; 

E:=AbsoluteField(Parent(a[1] )); 

Pol<x>:=PolynomialRing(E); 

assert Degree(E) eq 6 and HasRoot(x"3+x"2-4*x+l) and HasRoot(x"2+l); 

Fix notation as in §2.1. We have F 7 ^ 1 since e is non-trivial. The character x^ is trivial for 7 G F 
(since x-y is always a quadratic character times some power of e). Therefore, F is a 2-group. The 
field K = is thus Q(6) which is the unique cubic extension of Q in E. Therefore, Vp = 
lies in AT = Q{b) for all p \ N. 

The code below verifies that r3, ry and rn are squares in K that do not lie in Q (and in particular, 
are non-zero). Since 3, 7 and 11 generate the group (Z/40Z)^, we deduce from Lemma 2.3 that 
the field L = Ar({yTjj: p { A^}) is equal to K. 

_,b:=HasRoot(x~3+x"2-4*x+l); K:=sub<E|b>; 

r3:=K!(a[3]~2/eps(3)); r7:=K!(a[7]"2/eps(7)); rll:=K!(a[ll]'2/eps(ll)); 
assert IsSquare(r3) and IsSquare(r7) and IsSquare(rll); 

assert r3 notin RationalsO and r7 notin RationalsO and rll notin RationalsO; 

Let A'x/q- 77 —)■ Q be the norm map. The following code verifies that A'x/iq(^ 3 ) = 2®, = 

2 ®, NK/q{rxi) = 2 ^ 254 ^ Nk/q^xis) = 2 ^ 2132 ^ = 2^*5^, and that 

(6.2) gcd (641 • iVx/Q(r64i - (1 + 642^)2), 1061 • NK/^irioei - (1 + lOei^)^)) = 2 ^ 2 . 

rl3:=K!(a[13]~2/eps(13)); rl7;=K!(a[17]"2/eps(17)); 

assert Norm(r3) eq 2~6 and Norm(r7) eq 2~6 and Norm(rll) eq 2"12*5~4; 

assert Norm(rl3) eq 2~12*13~2 and Norm(rl7) eq 2"18*5"2; 

r641:=K!(a[641]~2/eps(641)); 

rl061:=K!(a[1061]'2/eps(1061)); 

nl:=Integers 0!Norm(r641-(1+641~2) ~2); 

n2:=Integers0!Norm(rl061-(l+1061~2)"2); 

assert GCD(641*nl,1061*n2) eq 2~12; 
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Set qi = 641 and 52 = 1061; they are primes congruent to 1 modulo 160. Let A be a prime ideal 
of R dividing a rational prime i > 3. From (6.2), we find that i Qi and ^ (1 + (mod A) 
for some i G {1, 2} (otherwise A would divide 2). 

Set Pi = 3, p 2 = 7 and ps = 11. For each non-trivial quadratic characters (Z/40Z)^ —)• {±1}, 
we have x{Pi) = “1 for some prime i G {1,2,3} (since 3, 7 and 11 generate the group (Z/40Z)^). 
From the computed values of Nx/Q(rp), we find that rp. ^ 0 (mod A) for all i G {1,2,3} and all 
non-zero prime ideals A { of 72. 

Set q = 3. We have noted that G AT — Q, so iF = Q(rq). The index of the order Z[rg] in R is 
a power of 2 since is a power of 2 . 

Let S be the set from §4 with the above choice of qi, q 2 -,Pi,P 2 -, P 3 and q. The above computations 
show that S consists of the prime ideals A of 72 that divide a prime 7 < 11. 

Now let i be an odd prime congruent to ±2, ±3, ±4 or ±6 modulo 13. Since K is the unique 
cubic extension in Q(Ci 3 ); we hnd that the ideal A := iR is prime in 72 and that F;^ = F^s. The 
above computations show that X ^ S when i ^ {3, 7,11}. Theorem 4.3 implies that if 7 ^ {3, 7,11}, 
then is conjugate in PGL 2 (Fa) to PSL 2 (Fa) or PGL 2 (Fa), where A is a prime ideal of 

O dividing A. So if 7 ^ {3,7,11}, the group isomorphic to PSL 2 (Fa) = PSL 2 (F£ 3 ) by 

Theorem 1.2(i) and the equality L = K. 

Now take A = iR with 7 G {3, 7,11}; it is a prime ideal. Ghoose a prime ideal A of O dividing 
A. We noted above that Z[r 3 ] is an order in 72 with index a power of 2 ; the same argument shows 
that this also holds for the order Z[r 7 ]. Therefore, the field kx generated over F^ by the images of 
rp modulo A with p { Ni is equal to F^. Since i^¥x = 7^, we find that conditions (c), (d) and (e) 
of Theorem 4.1 hold. 

We now show that condition (a) of Theorem 4.1 holds for our fixed A. We have cq = 0, so take 
any character x: (Z/7FZ)^ —)■ F^. We claim that xiQi) £ is not a root of — a^.x + e{qi)q^ 
for some i G {1,2}. Since qi = 1 (mod N), the claim is equivalent to showing that aq^ ^ 1 + qf 
(mod A) for some i G {1, 2}. So we need to prove that rq^ = (1 -|- (mod A) for some i G {1,2}; 
this is clear since otherwise 7 divides the quantity (6.2). This completes our verification of (a). 

We now show that condition (b) of Theorem 4.1 holds. We have ^ 0 (mod A) for all primes 

p G {3,7,11,13,17}; this is a consequence of Nj^jQ{rp) ^ 0 (mod 7). We have A4 = 120 if 

7 = 3 and A4 = 40 otherwise. Gondition (b) holds since (Z/A4Z)^ is generated by the primes 

p G {3, 7,11,13,17} for which p { M.i. 

Theorem 4.1 implies that is conjugate in PGL 2 (Fa) to PSL 2 (Fa) or PGL 2 (Fa). Since 

L = K, the group p^°\G) isomorphic to PSL 2 (Fa) = PSL 2 (F£ 3 ) by Theorem 1.2(i). 
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